Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File:                     Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier:          0qjdadHwHs49OiZx+bLXh5WGaM3e1HdCFigcLO5PhMk=
Subject key identifier:   D0:8F:17:D0:20:94:C4:90:B0:29:F3:EA:30:83:36:7A:07:16:F2:D8
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1C27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number:          1C05
Signing time:             Fri 22 Aug 2025 16:19:00 +0000
Manifest this update:     Fri 22 Aug 2025 16:18:59 +0000
Manifest next update:     Fri 29 Aug 2025 16:18:59 +0000
Files and hashes:         1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: ASq3MPLtXPPwikKNK/+/AEDoNgPmzS/qqJmbEN/Vwws=)
                          2: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: Q0+hX7TsyFyWEUhoyFXxRcuYnmI5ezzOdvEkCo3BkCI=)
                          3: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: BbGcUbwtP+aZHPYce4149SbFzjL1B5hYLShi68qQcek=)
                          4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: HlwCeu7nRQrhAHteeDH8/AzpstkCTMTYbzNnFUCPtI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7207 (0x1c27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Aug 22 16:18:59 2025 GMT
            Not After : Aug 29 16:18:59 2025 GMT
        Subject: CN=68a89873-093b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:d6:c1:d2:16:8b:ea:78:42:b1:17:b2:ff:
                    3b:99:aa:37:36:b9:84:3e:3d:36:3f:1c:ba:f3:a0:
                    6c:86:b2:ca:27:6d:a2:8d:02:d4:f0:78:48:75:1d:
                    0d:5e:e4:48:a0:e5:11:f9:1b:b1:02:2a:c2:54:cb:
                    41:76:49:e5:4d:97:4a:6c:13:f6:54:3a:5e:5e:e8:
                    09:f2:7a:6e:72:ee:d6:b4:fc:2e:c3:17:44:61:62:
                    0a:c0:cd:f9:8a:b6:56:e0:45:91:2f:57:a5:39:15:
                    a7:f7:ab:08:2b:d9:36:fb:ee:b2:36:64:ba:4f:d7:
                    b2:67:4d:df:a3:14:22:6b:3a:13:b7:ee:b5:9a:59:
                    84:96:8f:74:61:67:fe:7d:0b:91:07:f9:d8:bd:a3:
                    9e:03:01:2f:cf:b4:f2:e9:e8:cf:43:8c:fb:dc:be:
                    41:dc:fb:c2:56:7f:45:44:1f:e0:e3:4a:d5:bb:86:
                    d6:4e:a7:23:8c:11:03:67:a4:e1:b1:c3:04:12:71:
                    ca:24:9a:4f:ea:13:ed:fc:5e:63:48:cd:9b:de:70:
                    63:8e:33:e6:c0:16:38:d2:75:a1:d2:e3:50:1c:6b:
                    1c:15:7c:06:2d:a5:7c:bd:4a:47:99:c5:78:70:e2:
                    3a:d5:b7:63:0f:c9:6f:fc:2f:6a:57:a4:19:78:40:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8F:17:D0:20:94:C4:90:B0:29:F3:EA:30:83:36:7A:07:16:F2:D8
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:46:19:ff:c3:3c:62:85:74:20:a7:cc:0a:6a:67:d6:53:d7:
         29:63:e4:cc:4d:4a:24:a9:9c:76:b7:f6:4f:05:69:9d:61:67:
         60:9f:7a:d8:ae:7b:aa:1d:e0:4e:2f:4b:cf:26:b8:9f:20:80:
         55:bb:3e:b6:b7:2f:97:29:56:df:0c:54:30:04:a4:b8:7d:7b:
         cd:c3:72:5b:8d:8a:2f:c8:44:14:94:6f:01:8a:25:b0:e5:c8:
         7d:1e:66:9b:99:f0:a7:03:2c:ac:ef:35:f8:4e:b6:16:b8:82:
         df:ac:71:f7:64:15:35:78:5d:a6:eb:ad:d9:41:f8:8e:c7:ec:
         1b:7b:9b:17:03:ae:35:33:45:4f:33:54:f4:90:42:3e:3f:44:
         4e:8a:36:b6:bc:21:4d:4a:d3:12:5a:31:ed:43:8c:09:d4:7b:
         ef:b5:65:fc:ee:3a:53:d8:45:c5:a9:51:93:66:e4:e2:87:b9:
         21:90:f2:12:81:d0:ca:40:f5:89:cc:79:87:11:0e:9a:9d:ad:
         cc:3d:79:95:30:47:3c:c5:15:49:13:25:b2:b8:18:0e:4f:d9:
         44:98:12:9a:97:35:f5:76:79:1b:64:1c:e4:f5:3a:31:42:2f:
         cc:a0:cf:c2:5d:dc:fc:b1:eb:7c:38:a6:3e:18:51:b7:1b:f9:
         70:10:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:27:06 2025 by rpki-client